Virustotal flags Installaware Setups as malicious!

[Günther Schoch]

It looks, as switching to Installaware 15 from an older version (pre 14) does trigger Virustotal security alerts for all setups produced via Installaware:

Test-Case1: Simple InstallawareTest project with one text file (attached). Just copy the 2 folders in the attached 7z file to c:\temp\ and build a Single Setup.exe. Then upload the resulting setup to virustotal.com. The result will show alerts and look like: https://www.virustotal.com/gui/file/c45 ... 4183b22a94

Test-Case2: Upload the newest Installaware Public Trial Setup (Web-Install) InstallAware_X15.exe. The result will show alerts and look like: https://www.virustotal.com/gui/file/422 ... 1c890020fe

Test-Case3: Compare with other installers e.g. a Microsoft Office Setup: https://www.virustotal.com/gui/file/0ac ... 2a0c18e371
= no alerts

Some of our customers do not accept our install! They demand that we have to fix the issue. But as Installaware is the supplier and has the same problem in their own setup, there is nothing we can do on our side beside switching the installer?!

What are the next steps? And as long other installers do not show these alerts, we cannot argue that the "Installer is OK and not a Trojan". The customers do just not accept with all the financial consequences for us!

[pfennig]

I can confirm this as an example for one of our setups with a size of about 450 MB.

[Günther Schoch]

@pfennig: Thank you for your verification. I assume allInstallAware customers do see that problem. Means as a summary "today we cannot deliver software setups to customer demanding to pass VirusTotal" (which is a rather common and logical request!).

[Günther Schoch]

@support: Any feedback on that topic that proofing to our customer that Installaware setups do not contain any trojan?

[pfennig]

The web setup of InstallAware X16 is equally flagged as Trojan.

[FrancescoT]

What reported here is EXCLUSIVELY a FALSE POSITIVE, and about this, you may only contacy the AV vendor.

As a matter of policy we do not work around bugs in third party software.